CVE-2018-10780

Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read...

RHEL 6 : chromium-browser (RHSA-2018:1321)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1321 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 66.0.3359.139. Security Fixes:...

RHEL 7 : go-toolset-7 and go-toolset-7-golang (RHSA-2018:1304)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1304 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The following packages have been upgraded t...

RHEL 7 : python-paramiko (RHSA-2018:1274)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1274 advisory. - python-paramiko: Authentication bypass in transport.py CVE-2018-7750 Note that Nessus has not tested for this issue but has instead relied only on...

python security update

CentOS Errata and Security Advisory CESA-2018:1124 An update for python-paramiko is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 7 : openvswitch (RHSA-2018:1267)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1267 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fixe...

RHEL 7 : kernel (RHSA-2018:1216)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1216 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Use-after-free vulnerability i...

RHEL 7 : java-1.8.0-oracle (RHSA-2018:1204)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1204 advisory. - OpenJDK: incorrect merging of sections in the JAR manifest Security, 8189969 CVE-2018-2790 - OpenJDK: unrestricted deserialization of data...

RHEL 6 : chromium-browser (RHSA-2018:1195)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1195 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 66.0.3359.117. Security Fixes:...

RHEL 6 : patch (RHSA-2018:1199)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1199 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to...

RHEL 7 : java-1.7.0-oracle (RHSA-2018:1201)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1201 advisory. - OpenJDK: incorrect merging of sections in the JAR manifest Security, 8189969 CVE-2018-2790 - OpenJDK: unrestricted deserialization of data...

RHEL 7 : patch (RHSA-2018:1200)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1200 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to...

RHEL 7 : java-1.8.0-openjdk (RHSA-2018:1191)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1191 advisory. - OpenJDK: incorrect merging of sections in the JAR manifest Security, 8189969 CVE-2018-2790 - OpenJDK: unrestricted deserialization of data...

RHEL 6 : glusterfs (RHSA-2018:1137)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1137 advisory. - glusterfs: Privilege escalation via glustersharedstorage when snapshot scheduling is enabled CVE-2018-1088 Note that Nessus has not tested for this...

RHEL 7 : pcs (RHSA-2018:1060)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1060 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: pcs: Privilege...

RHEL 7 : glibc (RHSA-2018:0805)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0805 advisory. - glibc: denial of service in getnetbyname function CVE-2014-9402 - glibc: DNS resolver NULL pointer dereference with crafted record type...

RHEL 7 : qemu-kvm (RHSA-2018:0816)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0816 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide th...

RHEL 7 : openssh (RHSA-2018:0980)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0980 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary f...

RHEL 7 : firefox (RHSA-2018:1099)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1099 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to versi...

RHEL 7 : kernel-rt (RHSA-2018:0676)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0676 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...